AI contirubtions については別に良いと思ってるし僕もかなり AI coding agent 使ってるんだけど、なんというか単にAI使うのが下手?なAI slop PRがたくさん来るようになった。Scalaコンパイラみたいなニッチなプロジェクトでも増えてきたのだからJSとかPythonとかのフレームワークはとんでもなく大変そう
AI tools have changed the economics of this very quickly. We use them ourselves every day, but a pull request no longer tells us as much as it used to about the person submitting it. A substantial patch used to imply substantial effort, and that effort was a reasonable proxy for good faith. That assumption no longer holds.
For a browser, this matters. A browser runs untrusted input from the entire internet on the user’s machine, and one well-disguised vulnerability is all an attacker needs.
